tocsin

Alpine/erlang: critical 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Action: Upgrade erlang to 25.0.3-r0 or later.

Affected

introducedfixedlast affected
025.0.3-r0-

Fixed versions

25.0.3-r0

Sources

published · modified · JSON